Improper Access Control Vulnerability in Citrix Workspace App for Linux
CVE-2022-21825

7.8HIGH

Key Information:

Vendor

Citrix
Status
Citrix Workspace App For Linux
Vendor
CVE Published:
9 February 2022

What is CVE-2022-21825?

An improper access control vulnerability exists in the Citrix Workspace App for Linux that allows an attacker to escalate their privileges locally. This flaw affects versions 2012 through 2111 of the application when App Protection is installed. Exploiting this vulnerability could enable unauthorized users to gain elevated access to sensitive functions within the application.

Affected Version(s)

Citrix Workspace App for Linux Citrix Workspace App for Linux 2112 and later

References

https://support.citrix.com/article/CTX338435
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-21825 : Improper Access Control Vulnerability in Citrix Workspace App for Linux